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Description 



Hydrogen Storage System and Method 
of Operation Thereof 

Cross Reference to Related Applications 

[0001] This application is a continuation in part and claims the 

benefits of Regenerative Fuel Cell System and Method of 

Operation Thereof Application Serial Number 10/708,165 

filed February 12, 2004, the entire contents of which are 

incorporated herein by reference. 
Field of Invention 

[0002] The present invention relates to a regenerative fuel cell 

power generation system, and in particular to a system 

having multiple fuel cell and electrolysis cell modules of 

different configurations. 
Background of the Invention 

[0003] Regenerative fuel cell systems provide a reversible elec- 
trochemical process for using electricity to convert water 
into hydrogen and oxygen and then reversing the process 



to combine the hydrogen and oxygen to create electricity. 
Typically, these systems have a membrane electrode as- 
sembly ("MEA") that includes an ion conducting polymer 
membrane sandwiched between two electrodes containing 
a catalyst material. In fuel generation, or electrolysis 
mode, the electrical current is passed through the elec- 
trodes, causing the water in contact with the anode cata- 
lyst to decompose into its base elements of hydrogen and 
oxygen. Due to the unique characteristics of the polymer 
membrane, hydrogen ions are driven by the electrical cur- 
rent to the opposite cathode electrode where in the pres- 
ence of the second catalyst, the hydrogen ions recombine 
with electrons to form hydrogen gas. In electrical genera- 
tion, or fuel cell mode, the process is reversed. Hydrogen 
gas is introduced to the cathode electrode that decom- 
poses the hydrogen into a hydrogen ion and an electron. 
The hydrogen ion passes through the polymer membrane 
and combines with oxygen to form water at the anode 
electrode. Regenerative fuel cell systems are commonly 
divided into two categories: unitized regenerative fuel 
cells and discrete regenerative fuel cells. 
[0004] In a unitized regenerative fuel cell system ("URFC"), a sin- 
gle electrochemical cell used to generate both the hydro- 



gen gas and the electricity using the same MEA. This type 
of system has several advantages in that a single compo- 
nent can be used for both generating modes, leading a 
smaller lighter system. However, since the process must 
be completely reversible within the component, neither of 
the electrodes can be optimized for a particular genera- 
tion mode resulting in efficiency losses. Due to efficiency 
issues and cost considerations, URFC's are typically lim- 
ited to aerospace or geographically remote applications 
where the size and weight parameters are paramount. 

[0005] In contrast to the URFC, a discrete regenerative fuel cell 
("DRFC") system is designed to utilize two electrochemical 
cell components: an electrolysis cell for generating hydro- 
gen; and a fuel cell for generating electricity. By dividing 
the generation modes between two components each of 
the individual cell components can be optimized for its 
particular purpose. This leads to a more efficient and cost 
effective solution than can be currently accomplished with 
a URFC. Applications for the DRFC include backup or 
emergency power systems for buildings or telecommuni- 
cations facilities such as cellular phone towers. 

[0006] What is needed in the art is a cost effective and efficient 
regenerative fuel cell system that is adaptable to the 



changing needs of an application and whicli provides a 

greater degree of independent operation tlian liad been 

previously available. 
Summary of Invention 

[0007] In one aspect of the invention, a method for operating a 
high pressure gas storage system includes the steps of 
opening a first valve on a first high pressure gas storage 
container. Releasing gas from the first storage container 
and closing the first valve in response to a predetermined 
operating parameter. Opening a second valve on a second 
high pressure gas storage container and releasing gas 
from the second storage container. Then finally closing 
the second valve in response to the predetermined oper- 
ating parameter. The process may optionally be repeated 
for each container in the gas storage system until the gas 
is depleted from the storage system. 

[0008] In another aspect of the invention, a high pressure gas 

storage system includes a plurality of storage tank groups 
fluidly coupled to each other. Each of the plurality of stor- 
age tank groups has at least a first and second gas stor- 
age container fluidly coupled together and a valve fluidly 
coupled to the first and second storage container wherein 
when the valve is closed, said first and second gas con- 



tainers are fluidly isolated from the other storage tank 
groups. 

[0009] In another aspect of the invention, a method for deter- 
mining the individual pressure level of a gas storage con- 
tainer in a gas pressure storage system, when it is cou- 
pled to a plurality of gas storage containers utilizing a 
single pressure transducer includes the steps of closing 
the valves to all gas storage containers. Opening the valve 
to a first gas storage container to allow gas to enter a first 
conduit. Measuring the gas pressure in the first conduit. 
Closing the valve to the first storage container. Then 
opening a valve to vent the gas from said conduit and 
closing the valve to the vent. 

[0010] In another aspect of the invention, a high pressure gas 

storage system includes a plurality of storage tank groups 
fluidly coupled to each other. Each of the plurality of stor- 
age tank groups having at least a first and second gas 
storage container fluidly coupled together and a valve flu- 
idly coupled to the first and second storage container 
wherein when the valve is closed, the first and second gas 
containers are fluidly isolated from the other storage tank 
groups. The plurality of storage tank groups may option- 
ally be fluidly connected to a pressure regulator by a first 



conduit and have a pressure transducer coupled to the 
first conduit between the pressure regulator and the plu- 
rality of storage tank groups. 

[001 1] In another aspect of the invention, a method for deter- 
mining the individual pressure level of a gas storage con- 
tainer in a gas pressure storage system, when it is cou- 
pled to a plurality of gas storage containers utilizing a 
single pressure transducer includes the steps of closing 
the valves to all gas storage containers. Opening the valve 
to a first gas storage container to allow gas to enter a first 
conduit. Measuring the gas pressure in the first conduit. 
Closing the valve to the first storage container. Opening a 
valve to vent the gas from the conduit and closing the 
valve to the vent. The process may optionally be repeated 
for each container in the gas storage system. 

[0012] In another aspect of the invention, a method for deter- 
mining the health of a valve which conducts gas in a high 
pressure gas storage system includes the steps of closing 
all tank valves in the system. Venting gas from a conduit 
connected to the tank valves with the conduit being fluidly 
coupled to the check valve. Closing a valve to the vent and 
opening at least one tank valve to pressurize the conduit. 
Closing the tank valve and, opening an input valve, the in- 



put valve being fluidly coupled to the valve opposite the 
conduit. 

[0013] In an alternate embodiment of the invention, a method for 
determining the health of a valve which conducts gas in a 
high pressure gas storage system is provided including 
the steps of closing all tank valves in the system. Venting 
gas from a conduit connected to the tank valves, the con- 
duit being fluidly coupled to the check valve. Closing a 
valve to the vent and opening at least one tank valve to 
pressurize the conduit. Closing the tank valve and open- 
ing an input valve, the input valve being fluidly coupled to 
the valve opposite the conduit. The invention may option- 
ally further include the steps of measuring a first gas 
pressure at the input valve. Waiting a predetermined 
amount of time and measuring a second gas pressure af- 
ter the predetermined amount of time. Then disabling the 
system if the difference between the first gas pressure 
and the second gas pressure exceeds a predetermined 
amount. 

[0014] In another aspect of the invention, a method for deter- 
mining the health of a first and second pressure trans- 
ducer where each pressure transducer is located on either 
side of a pressure regulator includes the steps of measur- 



ing a first pressure of gas at a first pressure transducer. 
l\/leasuring a second pressure of gas at a second pressure 
transducer, where said second pressure transducer is lo- 
cated downstream from the first pressure transducer and 
opposite a pressure regulator. Comparing the first pres- 
sure with the second pressure once the pressure at the 
first pressure transducer drops below a predetermined 
threshold. Creating a signal if the difference between the 
first pressure and the second pressure if greater than a 
predetermined amount. 
[0015] In an alternate embodiment to the invention, a method for 
determining the health of a first and second pressure 
transducer where each pressure transducer is located on 
either side of a pressure regulator including the steps of 
measuring a first pressure of gas at a first pressure trans- 
ducer. Measuring a second pressure of gas at a second 
pressure transducer, where the second pressure trans- 
ducer is located downstream from the first pressure 
transducer and opposite a pressure regulator. Comparing 
the first pressure with the second pressure once the pres- 
sure at the first pressure transducer drops below a prede- 
termined threshold. Then creating a signal if the differ- 
ence between the first pressure and the second pressure if 



greater than a predetermined amount. 

[0016] In yet another alternate embodiment, a method for deter- 
mining the health of a pressure transducer while filling a 
gas storage system includes the steps of generating gas 
at a pressure. Measuring a first gas pressure at a first 
pressure transducer. Measuring a second gas pressure at 
a second pressure transducer and creating a signal if the 
difference between the first and second gas pressure is 
greater than a predetermined threshold. 

[0017] The above discussed and other features will be appreci- 
ated and understood by those skilled in the art from the 

following detailed description and drawings. 
Brief Description of Drawings 

[0018] Referring now to the drawings, which are meant to be ex- 
emplary and not limiting, and wherein like elements are 
numbered alike: 

[0019] Figure 1 is a perspective view illustration of the regenera- 
tive fuel cell system of the present invention; 

[0020] Figure 2 is a schematic diagram illustrating the mechani- 
cal connections of the regenerative fuel cell system of Fig- 
ure 1; 

[0021] Figure 3 is a perspective view illustration of the hydrogen 
storage system of Figure 1; 



[0022] Figure 4 is a schematic diagram illustrating the mechani- 
cal connections of the hydrogen storage system of Figure 
3; 

[0023] Figure 5 is a perspective view illustration of the hydrogen 
building manifold of Figure 1; 

[0024] Figure 6 is a perspective view illustration of the regenera- 
tive fuel cell system of Figure 1; 

[0025] Figure 7 is a schematic block diagram illustrating the data 
communications and electrical power interconnections of 
the regenerative fuel cell system of Figure 1; 

[0026] Figure 8 is a schematic diagram illustrating the electrical 
interconnections of the regenerative fuel cell system of 
Figure 1; 

[0027] Figure 9 is a schematic diagram illustrating the interface 

module of regenerative fuel cell system of Figure 8; 
[0028] Figure 10 is a schematic diagram illustrating the high 

pressure electrolysis module of the regenerative fuel cell 

system of Figure 8; 
[0029] Figure 11 is a schematic diagram of the low pressure 

electrolysis module of the regenerative fuel cell system of 

Figure 8; 

[0030] Figure 12 is a schematic diagram of the fuel cell module 
of the regenerative fuel cell system of Figure 8; 



[0031] Figure 13 is a flow diagram of a method of operating the 

low pressure and high pressure modules and hydrogen 

storage system; 
[0032] Figure 14 is a flow diagram of a method of operating a 

high pressure storage system having multiple storage 

containers; 

[0033] Figure 15 is a flow diagram of a method of determining 
the pressure level of the containers in the hydrogen stor- 
age system; 

[0034] Figure 16 is a flow diagram of a method of determining 
the functionality of a valve in the regenerative fuel cell 
system; 

[0035] Figure 17 is a flow diagram of a method for determining 
the functionality of a pressure transducer in the regenera- 
tive fuel cell system; 

[0036] Figure 18 is a flow diagram of an alternate embodiment 

method of determining the functionality of a pressure 

transducer in the regenerative fuel cell system. 
Detailed Description 

[0037] As shown in Figure 1, the regenerative fuel cell system 20 
of the present invention receives power from an external 
source 22 through an electrical panel 24. The panel 24 di- 
vides the electricity with a portion of the electrical power 



being provided to tlie generating system 26 and tlie re- 
mainder being provided to a load center 28. Tlie load 
center 28 transmits electrical power to a load 30, which is 
illustrated herein by a series of lights 32. The load center 
28 also receives power from the generating system 26. 
[0038] As will be described in more detail herein, the generating 
system 26 includes power generating modules 34, and 
hydrogen generators 36, 38. An interface module 40 pro- 
vides the system operator a central interface for the sys- 
tem 20. Additionally, an inverter 42 converts DC electric 
power generated by the power generators 34 into AC 
power which is provided to the load center 28 in the event 
of a power failure by the external source 22. An optional 
water storage tank 60 provide water to the hydrogen gen- 
erators 36, 38 and receives water recoverd by power gen- 
erator 34. 

[0039] A hood 44 is positioned above and adjacent to the gener- 
ating system 26 to provide the appropriate level of venti- 
lation to ensure that any combustible gases present re- 
main at an appropriate level for operation. A conduit 46 
containing a fan 48 draws air out of the hood 44 and ex- 
haust the air to the environment. A combustible gas sen- 
sor 50 and a pressure switch 52 provide signals to the in- 



terface module on the operating conditions in tlie room. It 
should be noted that generation system 26 is illustrated 
Figure 1 as being located within a building 23, however 
this is for example purposes only, the system may be 
housed within any suitable structure or cabinetry as ap- 
propriate for a given application. 
[0040] jhe hydrogen generators 36, 38 provide hydrogen gas via 
conduit 54 to the hydrogen storage system 56. The hy- 
drogen storage system 56 may include multiple contain- 
ers for gas storage as described here, or may be a smaller 
number (including a single) of larger containers depend- 
ing on the needs of the application and the availability of 
space. A conduit 58 returns hydrogen gas from storage 
system 56 for use by the power generating modules 34 in 
the event of an electrical power failure by external source 
22. 

[0041] A more detailed description of the mechanical intercon- 
nections of regenerative fuel cell system 20 is shown in 
Figure 2. The hydrogen storage system 56 includes one or 
more containers 62 which are used to store the hydrogen 
gas. In the preferred embodiment, these containers 62 are 
typically steel tanks (such as a HP 300 series tank manu- 
factured by the Worth ington Corporation) having a work- 



ing pressure of at least 2000 psi (13.8 MPa). Alternatively, 
a carbon composite tank (such as Model W150tl20068 
manufactured by DYNETEK Corporation) having a working 
pressure of at least 5000 psi (34.5 MPa) may be used. A 
described above, the containers are filled via conduit 54 
which connects the hydrogen storage system with the hy- 
drogen generators 36, 38. As will be described in more 
detail herein, the hydrogen generators contain electro- 
chemical cells that disassociate hydrogen from water to 
form hydrogen gas. In the preferred embodiment, the 
lower pressure electrochemical hydrogen generator 38 in- 
cludes a high volume, low pressure electrochemical cell 
64 which generates a high volume hydrogen gas at lower 
pressure levels. The hydrogen generator 38 also includes 
ancillary equipment such as hydrogen-water phase sepa- 
rators 66, oxygen-water phase separators 68, and gas 
dryer 70. In the preferred embodiment, the hydrogen gas 
disassociated by the electrochemical cell 64 may have wa- 
ter entrained in the gas stream. Since it is desirable to 
store dry hydrogen gas, the hydrogen gas enters the 
phase separator 66 that removes most of the water from 
the gas. Water removed in the phase separator 66 is 
drained periodically and recovered for later reuse in the 



hydrogen generation process. After exiting tlie pliase 
separator 66, tlie gas passes tlirougli a dryer 70, prefer- 
ably a swing-bed type dryer containing a desiccant that 
removes a majority of the water still remaining in the hy- 
drogen gas stream. Typically, the dryer 70 will include at 
least two dryer columns containing desiccant. During op- 
eration, hydrogen gas produced by the electrochemical 
cell 64 is passed through one of the dryer columns. After 
a predetermined period of time, the desiccant in the dryer 
column will be come saturated with water. The dryer 70 
will the switch the hydrogen gas stream to the other dryer 
column to continue drying the produced hydrogen gas. In 
a typical swing-bed type dryer, a portion of the hydrogen 
gas is used to purge and reconstitute the saturated dryer 
bed. Optionally, if the rate of hydrogen production insuf- 
ficient to purge and deliver simultaneously, the dryer 70 
will divert all hydrogen gas produced through the saturate 
bed, until such time that the dryer purge cycle is com- 
plete, typically the time to purge is approximate 1/10 the 
production period. In the preferred embodiment, since the 
pressured needed for draining the phase separator 66 is 
lost due to the purging of the dryer 70, the hydrogen 
generator 36 drains the phase separator a predetermined 



amount of time prior to tlie dryer 70 switching between 
columns in order to prevent tlie pliase separator 66 from 
flooding with water that would otherwise be due to an in- 
adequately drained phase separator. 

[0042] The electrochemical cell 64 is connected to the phase 

separator 68 by conduit 65. The phase separator 68 also 
provides additional functionality temporarily storing water 
prior to being transferred via conduit 69 to the electro- 
chemical cell 64. The oxygen phase separator 68 may op- 
tionally include a vent conduit 72 for exhausting oxygen 
to the environment. In the preferred embodiment, the low 
pressure electrochemical generates hydrogen at a rate be- 
tween 5 standard cubic feet per hour (scfh) and 80 scfh at 
a pressure between 20 psi and 400 psi. It should be ap- 
preciated that while the exemplary embodiments dis- 
cussed herein discuss the use of a PEM electrochemical 
cell to disassociate hydrogen from water to generate the 
hydrogen gas, it is contemplated that the hydrogen gen- 
erators may use other processes, such as hydrocarbon re- 
formers or alkaline electrolysis cell. 

[0043] A second hydrogen generator 36 is connected to conduit 
54 in parallel with hydrogen generator 38. In the preferred 
embodiment, hydrogen generator 36 generate hydrogen 



at a higher pressure than generator 38, typically in the 
range of 1000 to 10,000 psi (6.9 MPa to 69 MPa), prefer- 
ably hydrogen generator 38 produces hydrogen gas at 
2400 psi (16.5 MPa). In the preferred embodiment, hydro- 
gen generator 38 includes at least one, preferably two 
electrochemical cells 74. Hydrogen generator 36 also in- 
cludes ancillary equipment such as hydrogen-water phase 
separators 66, oxygen-water phase separators 68, and 
gas dryer 70. The oxygen phase separator 68 may option- 
ally include a vent conduit 72 for exhausting oxygen to 
the environment. In the preferred embodiment, the sec- 
ond hydrogen generator generates hydrogen at a rate be- 
tween 100 standard cubic centimeters per minute and 40 
scfh. Preferably, the hydrogen gas is generated at a rate of 
100 standard cubic centimeters per minute and 1200 
standard cubic centimeters per minute with a preferred 
output of 200 standard cubic centimeters per minute. 
[0044] Both low pressure hydrogen generator 38 and high pres- 
sure hydrogen generator 36 utilize their respective phase 
separators 66 to recover excess water for reuse and re- 
turn it to the water storage tank 60 via conduits 76. The 
storage tank 60 is sized to hold enough water to allow the 
hydrogen generators 36, 38 to fill the hydrogen storage 



system 56. Typically, a 4kW system will generally utilize a 
tank with a capacity of at least 50 gal (190 L). The water 
recovery conduits described herein help minimize the 
need to add additional water to the system. Optionally, 
water deionizing system , preferably capable of process- 
ing the water to a purity of 8 mOhms could be connected 
to the hydrogen generators to provide fresh water on an 
as-needed basis. Water is withdrawn from the storage 
tank 60 via conduit 77 by pump 78 that fills the oxygen- 
water phase separators in the hydrogen generators 36, 38 
via conduit 80. 

[0045] It should be appreciated that while the preferred embodi- 
ment shows a single lower pressure hydrogen generator 
and a single high pressure hydrogen generator, any num- 
ber or combination of low and high pressure generators 
may be used in combination depending on the needs of 
the application. In addition, while the preferred embodi- 
ment illustrates the hydrogen gas generated through wa- 
ter electrolysis, other hydrogen gas generation technolo- 
gies, such as hydrocarbon or natural gas reformation 
would equally function in the present invention. 

[0046] Hydrogen gas exits the hydrogen generators 36, 38 via 

conduit 54 that delivers the gas to hydrogen storage sys- 



tern 56. In response to a loss of electrical power from the 
external source 22, hydrogen gas is released from the 
storage module 56 and conducted via conduit 58 to an 
optional building manifold 82 which allows the hydrogen 
gas to enter the building, cabinet or container which 
houses the generation system 26. A second conduit 84 
transfers the hydrogen gas to the power generating mod- 
ules. In the preferred embodiment, there are multiple 
power generating modules 34, each of which is fed by its 
own conduit 84. However, only one power generating 
module 34 is shown in Figure 2 for clarity. The hydrogen 
gas is received by a fuel cell 86 which electrochemically 
combines the hydrogen gas with oxygen or air to generate 
electrical power. In the preferred embodiment, the fuel 
cell 86 contains an ion conducting polymer and a mem- 
brane electrode assembly (not shown) to perform the 
electrochemical process. An electrical DC/DC converter 88 
receives the electrical power from the fuel cell 86 and 
transmits the power to the load center 28 which transmits 
the electrical power to the load 30. 
[0047] A waste by-product of the fuel cell 86 electrochemical 

process is water that is formed by the combination of the 
hydrogen and oxygen. A conduit 90 conducts the water to 



phase separator 92 which separates oxygen gas and air 
from the water stream and vents the gases via conduit 96. 
A drain conduit 94 is connected to the phase separator 92 
to remove water from the system. In the preferred em- 
bodiment, the conduit 94 transfers the water from power 
generating module 34 to the storage tank 60. 
[0048] Referring now to Figure 3 and Figure 4, the hydrogen 
storage system 56 will be discussed in more detail. The 
hydrogen storage system 56 includes a housing 100 hav- 
ing a upper and lower set of openings 102, 104 located in 
the side walls 103 which allow ventilation of an interior 
portion 106. Each of the walls 103 further includes a per- 
forated/screen portion 108. A roof 109 closes the top of 
the housing 100 and includes an optional set of mounting 
brackets 110 are provided to assist in moving the system 
56. A platform 107 encloses the bottom of the housing 
100 and a vent 112 is attached to one of the walls 103. A 
controller 114, typically located internally to the housing 
100 provides any necessary control functions for the hy- 
drogen storage system 56 and also communicates with 
the other components in the regenerative fuel cell system 
20. It should be appreciated that the controller 114 may 
be located in the housing 100 as shown, or remotely from 



the housing 100 depending on the needs of the applica- 
tion. 

[0049] The Interior portion 106 of the housing 100 is subdivided 
by partitions 116 into a series of compartments 115 con- 
taining hydrogen gas storage containers 62. In the pre- 
ferred embodiment, each compartment 115 holds three 
hydrogen containers 62. Each of the hydrogen containers 
62 will typically include a dispensing valve 118 and pres- 
sure sensitive relief valve 120. The pressure sensitive re- 
lief valve may be any type of valve, such as a burst disk, 
which is intended to vent the container 62 in the event 
that the pressure of the gas inside the container 62 ex- 
ceeds a recommended operating level. In the preferred 
embodiment, the top of the partition 116 is located verti- 
cally above the dispensing valve 118 and the relief valve 
120 and the top of the container 62. The positioning of 
the partition 116 with respect to the valves 118, 120 and 
the container 62 provides advantages in the event that a 
fire should ignite in one of the individual containers 62 or 
its valve. Since the top of the partition 116 is above the 
point where a fire could ignite, the partition 116 acts as a 
barrier preventing the heating of the surrounding contain- 
ers 62 and thus preventing the respective pressure relief 



valves from opening and providing additional fuel for the 
fire. 

[0050] A set of valves 122 control flow both to and from the con- 
tainers 62 in each of the compartments 115. A conduit 
124 interconnects each of the valves 122 and through 
conduit 125 to allow eventual filling or dispensing of hy- 
drogen gas to the generating system 26 via conduits 54 
and 58. Conduit 124 also connects to vent stack 112 via 
conduit 128. A pressure relief valve 126 is connected to 
conduit 128 to allow venting of the hydrogen storage sys- 
tem 56 if the hydrogen gas pressure in the system 56 ex- 
ceeds a predetermined threshold, such as the maximum 
working pressure of the storage containers 62. In the pre- 
ferred embodiment, the pressure relief valve 126 opens 
when the hydrogen gas pressure exceeds 2500 psi. 

[0051] After hydrogen generators 36, 38 create the hydrogen 

gas, solenoid valve 130 opens to all conduit 54 to transfer 
the hydrogen gas to conduit 125. A check valve 132 pre- 
vents reversal of the flow of hydrogen gas back to the hy- 
drogen generators 36, 38. A pressure transducer 134, lo- 
cated upstream from the solenoid valve 130 detects the 
pressure of the hydrogen gas being generated by the hy- 
drogen generators 36, 38. Once the containers 62 are 



filled to the appropriate pressure, solenoid valve 130 
closes. 

[0052] In the event of a power loss from external source 22, con- 
duit 125 transfers hydrogen gas to the power generation 
modules 34 by transferring the high pressure gas, typi- 
cally at 2000 psi, through a pressure regulator which low- 
ers the working pressure of the hydrogen gas to a prede- 
termined pressure which the power generation modules 
can utilize. In the preferred embodiment, the pressure of 
the hydrogen gas in conduit 138 is between 50 psi and 
180 psi with a preferred pressure of 150 psi. An optional 
filter 145 may be used to prevent contaminants from en- 
tering the regulator 136. After the regulator 136, the hy- 
drogen gas stays in conduit 138 until solenoid valve 140 
opens, allowing the gas to transfer via conduit 58 the 
power generation modules 34 as described herein above. 

[0053] Since the storage system 56 may spend a considerable 
amount of time in an idle or "stand-by" condition, it will 
not be uncommon for the pressure in conduit 138 to vary. 
However, since a loss of pressure in the conduits 58, 138 
may indicate a breakage in the conduits 58, 138, a pres- 
sure switch 139 indicates whether sufficient pressure is 
being maintained in the line. As will be described in more 



detail below, the switch 139 is connected to a safety chain 
that will close the solenoid valve 140 and disable the re- 
generative fuel cell system in the event that an abnormal 
event such as a conduit breakage occurs. In the preferred 
embodiment, the pressure switch is closed if the pressure 
in the conduit 58 is maintained at a pressure greater than 
a predetermined value. In the preferred embodiment, the 
switch pressure is 10 psi. If the pressure drops below the 
predetermined value, the switch 139 opens activating the 
aforementioned safety chain. 
[0054] Since the storage system 56 needs to maintain a constant 
pressure in the conduits 58,138 an issue arises in the 
stand-by mode since normal leakage through valves and 
fittings may cause the pressure in conduits 58, 138 to rise 
above or fall below the desired operating range (e.g. 50 to 
180 psi). To maintain the appropriate pressure in the con- 
duits 58, 138 controller 114 uses a closed loop control 
arrangement to operate vent solenoid valve 144 and tank 
valve 122. Storage system 56 monitors the frequency that 
the pressure in conduits 58, 138 needs to be adjusted. 
Since frequent adjustments may indicate an issue requir- 
ing maintenance or repair, if the frequency rise above a 
predetermined threshold, the storage system 56 will issue 



a critical event message and disable the system 20. 
[0055] Conduit 142 connects conduit 138 to a pressure vent 

solenoid valve 144. Due to the large differential pressure 
across regulator 136, gas leakage through the regulator 
136 may over time allow pressure to increase in the con- 
duit 138. If pressure sensor 143 detects a pressure 
greater than the desired power module 34 operating 
pressure (e.g. 180 psi), controller 114 opens solenoid 
valve 144 allowing a portion of the hydrogen gas to vent 
through conduit 146 to the vent stack 112. Once the de- 
sired operating pressure is obtained in conduit 138, the 
valve 144 closes. A check valve 148 prevents any flow re- 
versal of gas from the external environment into the con- 
duit 146. 

[0056] Since it is possible for the valves 144 and relief valve 150 
to slowly leak gas, over time the pressure in the conduits 
58, 138 may drop below the desired operating range (e.g. 
50 psi). The controller 114 opens one of the tank valves 
118, 122 allowing the higher pressure hydrogen gas from 
conduit 125 to enter conduits 58, 138 until the desired 
pressure level is attained. In the event that the regulator 
136 should fail allowing high pressure hydrogen gas into 
conduit 138, a conduit 152 connects to conduit 58 to a 



pressure relief valve 150 which will open once the pres- 
sure in conduit 58 exceeds a predetermined threshold, in 
the preferred embodiment, the valve 150 opens once the 
pressure reaches 200 psi. Once the valve 150 opens, the 
gas transfers via conduit 154 to vent stack 112. In the 
preferred embodiment, the storage system 56 closes the 
solenoid valve 122 to prevent unnecessary loss of stored 
hydrogen gas. 

[0057] Prior to entering the building or housing 23 which con- 
tains the generating system 26, conduit 58 passes 
through a hydrogen manifold 82 as shown in Figure 5. 
This manifold 82 is typically mounted in the wall of the 
building provides an additional level of protection to limit 
the flow of hydrogen in the event that a conduit contain- 
ing hydrogen gas within the building 23 is ruptured. The 
conduit 58 connected to the manifold 82 through a cou- 
pling 156. The hydrogen gas passes into the body of the 
manifold 155 through the coupling 156 and into passage 
158. Passage 158 intersects with a passage 160 that ex- 
tends transversely through the body 155. A plurality of 
outlets 162 connect to passage 160 dividing the flow of 
hydrogen from a single conduit 58 into plurality of con- 
duits 58a, 58b, 58c, 58d via couplings 164. For reasons 



which will be made clearer herein, the number of outlets 
which connect to passage 160 is equal to the number of 
power generating modules 34 in the generating system 
26. 

[0058] Located within each of the outlets 162, is positioned an 
orifice 166 which restricts the flow of gas through the 
outlet 162. By appropriately sizing the orifice to limit the 
flow of gas to that required by the generating module 34, 
the amount of hydrogen that may leak into the housing 23 
in the event that one of the conduits 58a-58d is ruptured. 
Since the ventilation system within the housing 23 should 
be appropriately sized, by limiting the flow of gas into the 
building 23, the levels of combustible gas within the 
housing should be maintained at levels below the lower 
combustion level for hydrogen gas. In the preferred em- 
bodiment, the orifice 166 is 0.187 inches in diameter 
which limits the flow of gas to 99 standard liters per 
minute at 150 psi. It should be appreciated that the num- 
ber of outlets illustrated in Figure 5 is not limiting and any 
number of outlets may be used, it is preferred that there 
is one outlet 162 per generating module 34. However, 
multiple power generating modules 34 may be fed gas 
from a single outlet 162. Conversely, if additional levels of 



flow protection are desired, multiple outlets may be used 
to feed gas to a single power generating module 34. 

[0059] The generating system 26 is best seen with reference to 
Figure 6. In the exemplary embodiment, a plurality of 
power generating modules 34 are mounted to a rack 168. 
A high pressure hydrogen generator 36 and a low pres- 
sure hydrogen generator 38 are mounted to the rack 168 
adjacent the power generating modules 34. A user inter- 
face module 40 and an optional inverter 42 are also 
mounted to the rack 168. It is preferred that the interface 
module 40 and inverter 42 be mounted vertically above 
the hydrogen generators 36, 38 to reduce the potential of 
exposing electrical components to water from the hydro- 
gen generators 36, 38 in the event of a leak. 

[0060] In the preferred embodiment, a ventilation hood 44 is po- 
sitioned above the power generating modules 34 and hy- 
drogen generators 36, 38. The ventilation hood contains a 
fan 48 which draws air from the housing 23 and exhausts 
it to the external environment through a conduit 46 
(Figure 1). A pressure switch 52 and combustible gas sen- 
sor 54 are connected with the aforementioned safety 
chain. As will be described in more detail below, in the 
event that ventilation is lost due to a failure of the fan 48, 



or an unacceptable level of combustible gas is detected, 
the pressure switch 52 or combustible gas sensor 54 will 
open resulting in the regenerative fuel cell system 20 be- 
ing disabled. 

[0061] In the preferred embodiment, the rack 168 includes a 

center post 170. Each of the power generators 34 and hy- 
drogen generators 36, 38 have their external connection 
points 172 adjacent the center post 170. This positioning 
the connection points 172 in relation to the center post 
170 allows the hydrogen gas, electrical and water con- 
duits to be routed through the center portion of the rack 
168 which further protects the conduits from inadver- 
tently being damaged. 

[0062] The electrical and communications connections of the re- 
generative fuel cell system 20 will be described with refer- 
ence to Figures 7 - 12. Each of the main system compo- 
nents, such as the power generators 34, hydrogen gener- 
ators 36, 38 and the storage system 56, are intended to 
operate autonomously from other system components. 
This provides advantages in terms of scalability and relia- 
bility. As will be described in more detail, in the event that 
a local failure is detected by a system component, each of 
the system components has the ability to determine if the 



error or failure is localized, or is a critical event that ef- 
fects the operation of the rest of the system 20. Since an 
abnormal operating condition may result in damage to the 
system 20, a plurality of communications methods are 
used to monitor the system and provide for redundant 
communication between the user interface module 40 and 
the rest of the system components. 
[0063] AC electrical power enters the system 20 from an external 
source 22. The electrical panel 24, which contains a junc- 
tion box 174 that splits the electrical power between the 
regenerative fuel cell system and the load 32. Under nor- 
mal operating conditions, AC electrical power leaves the 
electrical panel 24 and is transferred to a load center 28 
which distributes the electricity to the load 32. The elec- 
trical panel 24 also provides electrical power to the user 
interface module 40 via line 176 for use by the regenera- 
tive fuel cell system 20. The interface module 40 dis- 
tributes the AC electrical power through a contactor 178 
to the power generators 34 and hydrogen generators via 
line 180. The AC electrical power also passes through a 
contactor 202. As will be described in the safety chain de- 
scription below, emergency stop button 182 breaks the 
safety chain circuit causing contactor 202 to open and 



disconnecting AC electric power from the system 20. Tiiis 
allows the operator to disable the entire system by acti- 
vating a single switch. As will be described in more detail 
with respect to each of the individual system components, 
the AC electrical power is used by the system 20 to pre- 
pare for an eventual loss of power from the external 
source 22. During such an event, the power generating 
modules 34, provide DC electric power via line 191 to in- 
verter 42 which provides AC electrical power to the load 
center 28 to power the load 32. In addition to the AC 
electrical power, the system components are also con- 
nected to the interface module 40 by the safety chain 184, 
a housekeeping DC electrical bus 186, a communications 
bus 188, a power enable 190, and a storage enable 192. 
[0064] jhe safety chain 184 provides an interconnection between 
each of the sensors used in the system 20 to monitor for 
critical events within the system 20 that require immedi- 
ate disabling of the system 20 to prevent damage to the 
equipment. The safety chain 184 is connected to the 
emergency stop 182 and electrically connects to sensors 
such as thermal fuses 194, combustible gas detectors 
196, pressure switches 200. Optional sensors such as 
tachometers, thermometers, smoke detectors, pyrome- 



ters, water level sensors and the like may also be used 
depending on the application or environment in which the 
system 20 will be operating. Safety chain 184 also con- 
nects with an enable relay 200 and contactor 202. Con- 
tactor 202 is connected to the safety chain 184 by line 
204 which connects to the magnet 206 that holds the 
contactor 202 in the closed position. In the event that an 
abnormal operating condition is detected by one of the 
devices in the safety chain 184, the device detecting the 
anomaly opens a switch which breaks the safety chain cir- 
cuit. Once the circuit is broken, the magnet 206 de- 
energizes and allows the contactor 202 to open. This se- 
quence of events results in the disconnecting of the AC 
electrical power circuit 180, power enable circuit 190 and 
the storage enable circuit 192. 
[0065] In addition to the safety chain 184 disconnect points, the 
user interface module 40 includes a circuit breaker 208, 
an AC-DC power converter 210 which converts the AC 
electrical power to an appropriate DC power, such as 24V, 
which is usable by the controller 212. The housekeeping 
bus 184 provides unregulated DC electrical power to a 
DC-DC converter which also provides power the controller 
212. The controller 212 receives and transmits messages 



over a communications bus 188 to determine tlie overall 
health of the system 20. In the preferred embodiment, the 
communications bus operates on a standard protocol, 
such as the CAN bus protocol defined in international ISO 
standard 11898 which allows for serial communications 
between electronic controllers of the system 20. The com- 
munications bus 188 is used by the power generators 34, 
hydrogen generators 36, 38 and hydrogen storage mod- 
ule 56 to notify their present state (e.g. on or off), the oc- 
currence of a local error event, the occurrence of a critical 
event, or in the case of the hydrogen generators 36, 38 a 
low water state. If the controller 212 receives a low water 
signal from the one of the hydrogen generators 36, 38, 
the controller 212 activates either the low pressure hydro- 
gen generator pump 78a or the high pressure generator 
pump 78b to provide additional water to the phase sepa- 
rator 68 in the hydrogen generator 36, 38 which sent the 
low water communication. The pumping continues until a 
default timeout period is reached or until the hydrogen 
generators 36, 38 no longer requests water. 
[0066] In the event that the controller 212 receives a message in- 
dicating a critical event in one of the system components, 
the controller 212 may disable the system 20 via line 214 



which de-energizes the enable relay 200. The de- 
energizing of the relay 200 breaks the safety chain circuit 
184 as described above and also removes the storage en- 
able signal over line 192 resulting the closing of valves 
130, 140 in the hydrogen storage system 56. Once the 
system is disabled, each of the system components 
(power generator, hydrogen generators and storage mod- 
ule) immediately ceases operation. After the operator 
clears the fault or error, the operator notifies the con- 
troller 212 via user interface 216. The controller 212 re- 
tains the "all clear" communication until it a start com- 
mand from the operator via user interface 216. Once the 
start command is issued, the controller 212 closes the en- 
able relay 200 allowing the contactor 202 to close provid- 
ing power to the system components. Subsequent or si- 
multaneously with the closing of the enable relay 200, the 
controller 212 broadcasts the "all clear" signal over the 
communication bus, allowing the system components to 
resume operation. In the event that the system compo- 
nents do not receive the "all clear" signal, or if the critical 
event message is still being received, they will not operate 
(e.g. generate hydrogen, provide hydrogen gas, generate 
electrical power). 



[0067] Controller 212 also connects with status LED's 218 to 

provide the operator with a visual feedback on the status 
of the system. Additionally, an ID signal 222, typically a 
discrete jumper, is provided to the controller 212 to use 
in conjunction with the communications protocol to indi- 
cate to the controller 212 when a communication is in- 
tended for the interface module. Optionally, a remote 
alarm 220 may be connected to the controller 212 to pro- 
vide feedback to a remote control room (not shown). 

[0068] Events within any of the modules that prevent operation of 
the system, but do not constitute a safety critical event 
will result in the issuance of a malfunction event. The 
malfunction event allows the system to remain powered to 
facilitate monitoring and correction of the faulty condition 
without the need to activate the safety chain shut down 
circuit. 

[0069] The electrical connections of the high pressure hydrogen 
generator are best seen in Figure 10. As describes above, 
AC electrical power is received from line 180 and con- 
verted by AC/DC power converter 224 which transforms 
the electrical power into a level of DC electrical power that 
is usable by the internal generator components. If the HP 
controller 226 has AC power available, and it receives 



"high pressure hydrogen needed" communication from 
the storage module controller 114, an enable signal is 
provided to the power converter 224 via line 225 and a 
pressure command is issued via line 228, 229 to subcon- 
trollers 230, 232 which provide power to the electro- 
chemical cell stacks 74 to generate hydrogen gas. 
[0070] While gas is being generated, the HP controller 226 moni- 
tors the water flow to the electrochemical stacks 74 
through pressure switch 232a, 232b via line 234a, 234b. 
A water level sensor provides a signal to the HP controller 
226 as to the level of water in the phase separator 68. If 
the water level drops below a predetermined threshold, 
the HP controller 226 issues a "water low" signal via the 
communication bus 188 to the interface module to pro- 
vide additional water from the water storage tank 60. Each 
of the subcontrollers 230, 232 also provide the HP con- 
troller 226 a status signal 235a, 235b for the pump that is 
providing water to the electrochemical stacks 74. By mon- 
itoring the states of each signal 234, 235 the HP con- 
troller is able to detect if there is a problem with the water 
supply to the electrochemical stack 74. For example, if 
there is no or a very low pressure reading from one of the 
switches 234 and a "pump on" signal from either of the 



subcontrollers 230, 232 via line 235, tliat would indicate a 
potential water line breakage. Since a lack of water could 
potentially damage the electrochemical cell stack 74, it 
would be advantageous to stop the process as soon as 
possible. Accordingly, the HP controller 226 removes the 
pressure command via line 228 causing the subcontrollers 
230, 232 to remove power from the electrochemical cells 
74 and minimize the risk of damage. In this type of local 
error event, there is no issue or problem with allowing the 
system 20 to keep operating since the other components 
in the system can maintain operation without risk of dam- 
age. As such, the HP controller 226 indicates an error to 
the LED's 238 and sends a state change communication to 
the interface module 40. Until the operator clears the 
fault, the hydrogen generator 36 ceases operation. Other 
examples of error events include an overpressure signal 
from pressure switch 240 which could indicate a blocked 
air vent, or an under pressure signal from pressure switch 
242 indicating a failure of the fan 248. It should be ap- 
preciated that the above description of the hydrogen gen- 
erator is for exemplary purposes and that the same func- 
tionality could be accomplished using a single controller. 
[0071] A combustible gas detector 244 located in each hydrogen 



generator 36 monitors for unacceptable levels of com- 
bustible gas within the hydrogen generator 36. In the 
event that the level of combustible gas within the hydro- 
gen generator exceeds a predetermined threshold, such 
as 25% of the lower flammability limit of the gas, the HP 
controller 226 broadcasts a "critical event" signal via the 
communications bus 188. The HP controller 226 may also 
receive signals from the communications bus 188. In the 
exemplary embodiment if another system component de- 
tected a critical event, the HP controller 226 would receive 
a "critical event" signal, and would immediately ceases 
operation. As was described above, the HP controller will 
not generate hydrogen gas until an "all clear" signal is re- 
ceived from the interface module 40. A second type of 
communication that the HP controller 226 could receive is 
a "system event" signal indicating that there is a potential 
issue in another one of the system components that 
would prevent normal operation. After receiving this sig- 
nal, the HP controller 226 would remove the pressure sig- 
nal 228, 229 and stop the generation of hydrogen gas, 
but would not turn itself off. A third communication that 
the hydrogen generator 36 could receive in the exemplary 
embodiment is a "high pressure hydrogen needed" signal 



as described above, which would initiate the production of 
high pressure hydrogen gas. 

[0072] The electrical power needed by the HP controller 226 and 
the ancillary equipment, such as the cabinet fan 248 and 
sensors 240, 242, 244 is provided by the housekeeping 
bus 186 via DC/DC power converter 246 which provides 
an appropriate DC electrical power to the HP Controller. In 
the preferred embodiment, the power converter 246 pro- 
duces 24VDC electrical power. Providing power to the HP 
controller 226 from the housekeeping bus 186 provides a 
number of advantages over using the AC electrical power 
provided by the external source 22. As will be described 
in more detail below, the electrical power for the house- 
keeping bus is provided by the power generating modules 
34. By operating off of electricity provided by the power 
generating modules, it is highly improbably that a loss of 
power from external source 22 will effect the controls of 
the hydrogen generator 36, allowing it to shut down in a 
controlled and planned manner even in the event of power 
loss and to allow health monitoring to detect other error 
events, such as a critical event that would necessitate dis- 
abling the system 20. 

[0073] Referring now to Figure 11, the electrical connections for 



the low pressure hydrogen generator 38 are shown. In a 
similar manner to the high pressure hydrogen generator 
36, the AC electrical power is received by an AC/DC power 
converter 250 from line 180. The power converter 250 
converts the AC power into a DC electrical power that is 
usable by the electrochemical cell 64 and the ancillary 
equipment 66, 70, 68, 256, 258. The power converter 250 
and the ancillary equipment connects to the cell controller 
252 via line 254. If the LP controller 260 received a "low 
pressure hydrogen needed" signal via communications 
bus 188, the LP controller signals to the cell controller to 
initiate hydrogen production. In response to this signal, 
the cell controller sends an enable signal via line 254 to 
power converter 250 which provides electrical power to 
the electrochemical cell stack 64. 
[0074] LP controller 260 and the cell controller 252 receives its 

electrical power from DC/DC converter 262 which receives 
DC electric power from the housekeeping bus 186. Elec- 
trical power for all the ancillary equipment controlled by 
the LP controller 260, such as the pressure sensors 260, 
262, combustible gas sensor 264 and fan 266 are also 
provided by the housekeeping bus 186 via power con- 
verter 262. For similar reasons discussed above with re- 



spect to the high pressure hydrogen generator 36 it is ad- 
vantageous to provide of power from the housel<eeping 
bus 186 so that control of the generator 38 may be main- 
tained even in the event of a power loss from external 
source 22 and to allow health monitoring to detect other 
error events, such as a critical event that would necessi- 
tate disabling the system 20. 
[0075] While gas is being generated by the electrochemical cell 

stack 64, the cell controller 252 monitors the operation of 
the ancillary equipment. Each of the major components, 
such as the hydrogen phase separator 66, gas dryer 70, 
water management system 256, oxygen phase separator 
68 and hydrogen gas manifold 258 contain sensors for 
monitoring water levels 268, gas pressures 270, water 
quality 272, valve positions and the like. In the event that 
the cell controller 252 detects an anomaly in the operating 
conditions, a local error event signal is transmitted to the 
LP controller 260 and the gas generation process is 
stopped and the system shut down to minimize the risk of 
damage to the hydrogen generator 38. Upon receiving the 
local error event signal from cell controller 252, the LP 
controller 260 indicates an error to the LED's 274 and 
sends a state change communication to the interface 



module 40. Until the operator clears the fault, the hydro- 
gen generator 38 ceases operation. Other examples of er- 
ror events include an overpressure signal from pressure 
switch 260 which could indicate a blocked air vent, or an 
under pressure signal from pressure switch 262. It should 
be appreciated that the above description of the hydrogen 
generator is for exemplary purposes and that the same 
functionality could be accomplished using a single con- 
troller. 

[0076] Similar to the high pressure hydrogen generator 36, a 
combustible gas detector 264 located in each hydrogen 
generator 38 monitors for unacceptable levels of com- 
bustible gas within the hydrogen generator 38. In the 
event that the level of combustible gas within the hydro- 
gen generator exceeds a predetermined threshold, such 
as 25% of the lower flammability limit of the gas, the LP 
controller 260 broadcasts a "critical event" signal via the 
communications bus 188. The LP controller 260 may also 
receive signals from the communications bus 188. In the 
exemplary embodiment if another system component de- 
tected a critical event, the LP controller 260 would receive 
a "critical event" signal, and would immediately ceases 
operation. As was described above, the HP controller will 



not generate hydrogen gas until an "all clear" signal is re- 
ceived from the interface module 40. A second type of 
communication that the LP controller 260 could receive is 
a "system event" signal indicating that there is a potential 
issue in another one of the system components. After re- 
ceiving this signal, the LP controller 260 would signal the 
cell controller 252 to stop the generation of hydrogen 
gas, but not to turn itself off. A third communication that 
the hydrogen generator 38 could receive in the exemplary 
embodiment is a "low pressure hydrogen needed" signal 
as described above, which would initiate the production of 
hydrogen gas. 

[0077] Optionally, the system may use a DC energy source such 
as photovoltaic or wind power instead of the AC grid 22, 
in this case the input power 180 and associated power 
components 208, 210, 224, 250, 276 will be based on the 
DC input instead of an AC input. 

[0078] Turning now to the power generator 34 which is best 

shown in Figure 12. AC electrical power is supplied to the 
generator 34 via line 180 and received by DC/DC con- 
verter 276. The converter 276 transforms the AC electrical 
power to DC electrical power that is usable by the various 
components of generator 34. In the preferred embodi- 



ment, the converter 276 outputs 48VDC at 360W. The 
output from converter 278 passes along line 278 through 
diode 286 and into an unregulated bus 288. Generator 34 
also includes a bridge energy source 284 which stores 
electrical energy for use by the system 20 during the ini- 
tial moments after power loss from external source 22. 
Converter 278 further provides a signal 279 to FC con- 
troller 300 indicating that it is receiving AC electrical 
power from line 180. The bridge 284 may be any suitable 
energy storage device, such as a capacitor, a super capac- 
itor, an ultracapacitor, or a battery. The energy stored by 
the bridge 284 is received from DC/DC converter 282 
which receives electrical power from line 278 via line 280. 
Line 292 connects the bridge 284 connects to the unreg- 
ulated bus 288 through a relay 290 and diode 294. Relay 
290 opens and closes in response to a bridge enable sig- 
nal 296 received from the FC controller 300. In the pre- 
ferred embodiment, the relay 290 is closed or "enabled" 
as provided that the controller 300 determines that no lo- 
cal error events have occurred in the generator 39. As will 
be made clearer herein, by maintaining the relay 290 in a 
closed position, the bridge 284 is able to respond to a 
loss of power from external source 22 nearly instanta- 



neously. Bridge 284 also provides a signal 298 indicating 
the electrical voltage level remaining in the bridge and 
available to the system 20. 
[0079] Unregulated bus 288 connects to the output bus 191 via a 
DC/DC power converter 304 which transforms the bus 
288 voltage which may float over a predetermined electri- 
cal power range to an output of 24VDC which is usable by 
inverter 42 to power the load 32. Additionally, bus 288 
connects to the housekeeping bus 186 via line 306 and 
diode 208. DC/DC power converter 310 receives electrical 
power from line 306 and transforms it for use by the FC 
controller 300 and the fuel cell 302. Fuel cell 302 is con- 
nected to the unregulated bus 288 via line 314 and relay 
315The FC controller 300 provides overall control func- 
tionality for the generator 39. Ancillary equipment such as 
water recovery pump 312 and status LED's 313 operate in 
response to signals from FC controller 300. Similarly to 
controllers in the other system components, FC controller 
communicates its current state and the occurrence of a 
local error event or a critical event message via communi- 
cations bus 188. In the exemplary embodiment, the con- 
verters 304, 276 provide a signal via lines 277, 279 if an 
error occurs in their operation and fuel cell 302 removes a 



"ready" signal in the event of an error or malfunction via 
line 324. These are examples of errors which would trig- 
ger a local error event that shuts down the individual 
power generator 34 without disabling the system 20. In 
addition to these messages, in the event of a power loss 
from external source 22, FC controller will broadcast a "re- 
quest for hydrogen" signal and a "fuel cell pressure" signal 
to the hydrogen storage system 56. 
[0080] During normal operation (i.e. external source 22 providing 
power) when the generator 34 is activated, FC controller 
300 receives a signal via power enable line 190 from the 
interface module 40. FC controller monitors the operation 
of the generator 34 and providing no errors are detected, 
FC controller 300 provides a bridge enable signal via line 
296 which connects the bridge to the unregulated bus 
288. The FC controller also provides an enable signal to 
relay 317 via line 316 and to converter 304 via line 318. 
Once these events occur, the power generator 34 is in a 
condition to provide electrical power to the load 32 if 
power is lost from external source 32. In the event that 
power is lost, the converter 276 sends a signal via line 
279 to FC controller 300 indicating the loss of AC electri- 
cal power. Provided that FC controller is still receiving a 



power enable signal via line 190, the bridge enable signal 
will have the relay 290 in a closed position allowing elec- 
trical power to immediately flow from the bridge 284 to 
the unregulated bus 288. In the preferred embodiment, 
the bridge 284 is able to provide 60kWS of electrical 
power at 47 22VDC. The electrical power from bridge 284 
flows through the convert 304 to provide power to the 
load 32, and also through the housekeeping bus 186FC 
controller 300 monitors the voltage in unregulated bus 
288 via a signal from line 320. If the voltage in the unreg- 
ulated bus falls below 22VDC, the FC controller 300 initi- 
ates a shutdown procedure. 

[0081] While the exemplary embodiment uses separate con- 
trollers in power generator 34, an alternate embodiment 
may use a single controller and optionally may eliminate 
relays 315, 317, 316, 324. Additionally, fuel cell 302 may 
be run in an idle or a pre-start mode prior to loss of AC 
power from conduit 180 to eliminate or reduce the need 
for the bridge circuit 282, 284, 296, 294. 

[0082] While the bridge 284 is providing power to the load 32, FC 
controller 300 sends a "request for hydrogen" message via 
communications bus 188 and a start signal via line 320 to 
fuel cell 302. If hydrogen is available, the fuel cell 302 



starts generating electrical power and transmits it to un- 
regulated bus 288. Fuel cell 302 monitors the pressure 
level of the hydrogen gas and transmits the pressure level 
along with any applicable operating parameters via line 
322 to FC controller 300. As a check against possible 
leakage in the conduits feeding hydrogen to the power 
generator 34, the hydrogen pressure parameter measured 
by the fuel cell 302 is transmitted via the communication 
bus 188 to the hydrogen storage system controller 114. 
The controller 114 compares the pressure value transmit- 
ted by the power generation 34 against that measured at 
the hydrogen storage system 56 to determine if there is a 
potential leak. In the preferred embodiment, if the hydro- 
gen storage module 56 increases pressure to the power 
generator 34 for a predetermined period of time and the 
pressure at the fuel cell does not increase, the hydrogen 
storage system 56 will transmit a critical event message 
on communications bus 188 resulting in the disabling of 
the system 20. 

[0083] There is also a potential for the hydrogen pressure pa- 
rameter transmitted to the hydrogen storage system 56 to 
indicate that the pressure at the fuel cell 302 exceeds a 
predetermined threshold. To prevent damage to the fuel 



cell 302, the hydrogen storage system 56 will open the 
vent valve 144 to relieve pressure in the conduit 58 and 
the fuel cell 302. Once the pressure at the fuel cell 302 
returns to a predetermined operating range, the valve 144 
will close. 

[0084] A method for operating the regenerative fuel cell system 
20 is shown in Figure 13. The system 20 starts at block 
340 and first checks to see if a critical event signal is be- 
ing transmitted on communications bus 188 in decision 
block 342. If there is a critical event message received, in 
block 344, the hydrogen storage module closes valves 
130, 140 and the hydrogen generators 36, 38, power 
generators 34, and user interface module 40 shutdown. If 
there is no critical event message, the system 20 check to 
see if a system error event signal has been transmitted on 
communications bus 188 in decision block 345. If there is 
a message, in block 347 the hydrogen storage module 
closes valves 130, 140 and the hydrogen generators 36, 
38 stop generating hydrogen, and power generators 34 
stop producing electricity, but otherwise remain func- 
tional. 

[0085] If there have been no error message, hydrogen storage 

system 56 monitors for a "request for hydrogen" message 



in decision blocl< 346. If there is a request signal, this in- 
dicates a loss of power from the external source 22. The 
hydrogen storage system in block 349 discontinues trans- 
mitting any "hydrogen needed" signals to the hydrogen 
generators 36, 38. Valve 140 is opened to provide hydro- 
gen gas to the power generators 34 in block 348 and the 
system loops back to block 340. 
[0086] If there is no request for hydrogen signal, the hydrogen 
storage system 56 proceeds to block 350 where the hy- 
drogen gas pressure in each of the storage tanks 62 is 
checked to determine if any one of the tanks 62 needs 
additional hydrogen. In decision block 352, the system 
determines if the pressure is less than a first desired 
pressure. In the preferred embodiment, the first desired 
pressure is 200psi. If there is a tank at less than the first 
desired pressure the hydrogen storage system opens the 
valve 122, and valve 118 associated with the tank 62 re- 
quiring filling in block 349 and transmits a "low pressure 
hydrogen needed" message along communications bus 
188 to the low pressure hydrogen generator 38. The sys- 
tem then loops back to block 340 to repeat the process. 
This process will continue to repeat until all the tanks 62 
are filled to a pressure of the first desired pressure. 



[0087] After all the tanks are filled to at least 200 psi, the pro- 
cess continues to decision block 356 and interrogates 
each of the tanks 62 to determine if the pressure in any of 
the tanks is less than the second desired pressure. In the 
preferred embodiment, the second desired pressure is at 
least 2000 psi. If there are tanks 62 at a pressure less 
than the second desired pressure, the hydrogen storage 
system 56 opens the valves 122, 118 associated with the 
tank 62 in block 359. The hydrogen storage system then 
transmits a "high pressure hydrogen needed" message 
along communications bus 188 to the high pressure hy- 
drogen generator 36. The system then loops back to block 
340 to repeat the process. This process will continue to 
repeat until all the tanks 62 are filled to a pressure of the 
second desired pressure. 

[0088] Once all the tanks 62 in the hydrogen storage system 56 
have been filled to the proper pressure, the "high pressure 
hydrogen needed" signal is terminated in terminator block 
360, and the system loops to block 340 and is repeated. 

[0089] As described herein above, in the event of a power failure 
from the external source 22, the regenerative fuel cell 
system 20 utilizes hydrogen from the hydrogen storage 
module 56 to provide fuel for the generating system 26. 



Referring to Figure 4, tlie individual containers 62 in the 
storage module 56 are manifolded together in groups, in 
the preferred embodiment, there are three containers 62 
connected together. Since the gas stored in the containers 
62 is at high pressure, typically being at 200 psi to 
10,000 psi, the valve 122 must be able to seal against the 
pressure differential between the conduit 124 and the 
stored gas in the containers 62. Typically, the type of 
valves 122 which are commonly used in this type of appli- 
cation are only able to withstand high pressure differen- 
tials in one direction across the valve. When a pressure 
differential exists in the opposing direction, there is a po- 
tential for gas to leak back across the valve 122. Typically, 
these valves 122 can only withstand a back flow pressure 
differential of 50 psi to 100 psi. 
[0090] If during operation, the gas is expended from one group 
of storage containers, the potential exists for a high pres- 
sure differential to exist across the valve 122 between the 
conduit 124 and a group of storage containers. This is 
undesirable since it would unnecessarily lead to losses in 
system efficiency Accordingly, it is considered advanta- 
geous to provide a method for cycling through the con- 
tainers in the storage module 56 in order to maintain a 



predetermined maximum pressure differential between 
the storage containers 62. 

[0091] Referring now to Figure 14, a method 399 of operating a 
high pressure storage module 56 is shown. The hydrogen 
storage module controller 114 initiates the sequence at 
block 400. A controller 114 opens 402 the valve 122 for 
the first group of containers 62 to release 404 the gas 
into conduit 124. After waiting 406 a predetermined 
amount of time, the controller 114 closes 408 the valve 
122. After incrementing the container group number "n" 
in block 410, the controller 114 determines in decision 
block 412 if the last container groups was the last con- 
tainer in the module 56 to be used. If it isn't, the con- 
troller 114 loops back on line 418 to block 402 and re- 
peats the process for the next group of containers in the 
storage module 56. 

[0092] Once controller 114 utilizes gas from the last group of 
containers in the module 56, it determines the pressure 
level in the tanks at pressure transducer 147. If adequate 
pressure levels remain in the containers 62 to allow oper- 
ation of the generation system 26, then decision block 
414 loops back to the beginning of the process via line 
420 to block 400 and repeats the process again. Once the 



gas pressure in storage containers 62 falls below a prede- 
termined threshold, the process transfers to block 416 
where the controller 114 transmits an out of gas signal to 
the regenerative fuel cell system 20. In the preferred em- 
bodiment, the predetermined threshold is the minimum 
operating pressure of the power generating module 34. 
Preferably, this pressure is between 10 and 100 psi, and 
more preferably the pressure is 50 psi. 
[0093] In order to be cost effective and to increase reliability, it is 
desirable to minimize the number of pressure sensors in 
the hydrogen storage module 56. In the preferred embod- 
iment, a single pressure sensor 147 is used to interrogate 
the pressure levels for all the storage containers 62 in the 
storage module 56. As shown in Figure 15, a process 422 
is used to determine the pressure levels in the containers 
56. The process 422 starts in block 424 which sets a vari- 
able representing the container group number "n" to one. 
The controller 114 closes 426 all the valves 122 and then 
opens 428 the vent valve 144 to lower the pressure in 
conduit 125. The controller starts a timer 430 and mea- 
sures 432 the gas pressure in conduit 125. If the pressure 
has not fallen below a predetermined threshold in deci- 
sion block 433, and the time on the timer 430 is less than 



a predetermined maximum time, the process loops bacl< 
via line 436 to measure 432 the pressure in conduit 125. 
[0094] If the time exceeds a predetermined maximum, decision 
block 434 continues block 438 which determines there is 
a potential stuck valve 122 in the storage module 56. The 
controller 114 will generate 440 a fault signal which is 
transmitted to the regenerative fuel cell system 20 and 
exits the process 422. If the pressure does fall below the 
predetermined threshold, typically 50 psi, the process 
continues on to block 442 which closes the vent valve 
144. 

[0095] The timer is reset to zero and started once again in block 
444. The valve 122 to container group "n" is opened 446 
and the pressure sensor 147 measures 448 the gas pres- 
sure in the conduit 125. Decision block 450 determines if 
the time is less than a predetermined threshold, typically 
10 30 seconds, and preferably 20 seconds. If it is, the 
process loops back to continue measuring 446 the pres- 
sure in conduit 125. Once the maximum time is reached, 
the valve 122 for container group "n" is closed 452 and 
the container group number "n" is incremented by one. 
Decision block 456 determines if the gas pressure in all 
the container groups in the storage module 56 has been 



measured by comparing the group number "n" to the 
number of groups in the module 56. If there are remain- 
ing groups to be measured, the process loops via line 458 
to block 428 which opens the vent valve 144 to start the 
process again. 

[0096] Once all the container groups have been measured, the 

process may optionally perform several more steps to de- 
termine that a valve 122 is not stuck open. The vent valve 
144 is opened 460 and the timer is started 462. The gas 
pressure in the conduit 125 is measured by pressure sen- 
sor 147 and decision block 464 compares the measured 
pressure to a predetermined minimum pressure, typically 
50 psi. If the gas pressure in conduit 125 is greater than 
the predetermined minimum pressure, decision block 466 
determines if the predetermined maximum time has been 
reached. If not, the process loops back to block 463 to 
continue to measure the gas in the conduit 125. If the 
predetermined maximum time has been exceeded, the 
controller 114 determines 468 that there is a potential for 
a stuck valve 122 and generates 470 a signal which is 
transmitted to the regenerative fuel cell system 20 and 
exits the process 422. If the maximum time has not been 
exceeded, the process 422 exits 472 normally and contin- 



ues with further operation. 

[0097] Since the system 20 includes a number of valves, and it is 
desirable for the system 20 to determine the health of the 
valves in order to ensure that proper operation is being 
maintained. Figure 16 shows the preferred embodiment 
process 474 that is used by the controller 114 for check- 
ing the integrity of valves through the use of system gas 
pressure. It should be appreciated that the process may 
be used for any of the valves in the system 20, however, 
for example purposes, the process 474 will be described 
for the testing of check valve 132. 

[0098] The process starts at block 476 and closes 478 all the 
valves 122, 140, 130. The vent valve 144 and any isola- 
tion valves, such as valve 130 are opened 480, and a 
timer 481 is started. The pressure at sensor 134 is mea- 
sured 483 and decision block 482 determines if the gas 
pressure in conduit 54 is less than a predetermined pres- 
sure, typically 50 psi. If the pressure has not fallen below 
the predetermined pressure, decision block 484 deter- 
mines if the predetermined maximum time has been 
reached, if it has not, the process loops back to block 483 
to continue measuring the gas pressure in conduit 54. If 
the predetermined maximum time has been reached, the 



controller 114 determines 485 that there is a potential 
stuck valve 122 and a fault signal is generated 486 and 
transmitted to the system 20. 

[0099] If the pressure in conduit 54 drops below the predeter- 
mined minimum pressure, the process proceeds from de- 
cision block 490 and closes 488 the vent valve 144 and 
any isolation valve such as valve 130. In decision block 
490, the controller 114 determines if the gas pressure in 
any one of the container groups is greater than a prede- 
termined minimum gas pressure, typically 50 psi. If the 
gas pressure in the storage containers is not sufficient, 
the process exits via block 492. 

[0100] If there is sufficient gas pressure in at least one storage 
container 62, then the process opens 494 one of the 
valves 494. A timer 496 is started and the process enters 
a time loop via decision block 498. Once a predetermined 
amount of time has occurred, the process closes 500 the 
tank valve 122 and a first pressure is measured at pres- 
sure sensor 134. The isolation valve 130 is opened 504 
and again, the process enters a time loop via blocks 506, 
508. Once a predetermined amount of time has occurred, 
the second pressure in conduit 54 is measured by pres- 
sure sensor 134. In decision block 512, if the absolute 



difference between the first and second gas pressure in 
conduit 54 is greater tlian a predetermined value, prefer- 
ably 20 psi, then the process detects a potential faulty 
check valve 132 and a fault signal is generated 516 and 
transmitted to the system 20. If the difference in the first 
and second pressures in decision block 512 are less than 
the predetermined threshold then the valve being tested 
passes and the process exits normally via block 514. 
[0^0^ Since it is desirable to minimize the number of pressure 
transducers in the system 20, it is advantageous to utilize 
a process for checking the health or functionality of the 
sensors to determine that the system can rely on the 
pressure readings. Figure 17 shows a process for deter- 
mining the health of a pressure sensor during operation at 
low gas pressures. The process 518 starts at block 520 
and first checks in decision block 522 to determine if the 
gas pressure at pressure sensor 147 is at or below the 
regulation pressure of pressure regulator 136. If the gas 
pressure is not, then the process loops back to start block 
520. If the gas pressure is below the threshold for regula- 
tion for valve 136, the process measures 524 the pressure 
upstream from valve 136 at sensor 147 and measures 526 
a second pressure downstream from valve 136 at sensor 



143. Since the pressure on either side of the valve 136 
should be approximately the same (being below the regu- 
lation pressure), the process 518 determines in decision 
block 528 if the absolute value of pressure difference 
measured at sensor 147 and sensor 143 is less than a 
predetermined desired pressure, then the sensors 143, 
147 are functioning properly and the process 518 loops 
back to start block 520. 
[0102] If the pressure differential does exceed the predetermined 
threshold, the process 518 continues on to block 530 
which starts a timer. The gas pressures are then measured 
at sensor 147 in block 532 and sensor 143 in block 533. 
If the absolute value of the pressure differential exceeds 
the predetermined threshold. The process proceeds to 
decision block 536 to determine if the predetermined 
maximum time, typically 5- 20 seconds, has been ex- 
ceeded. If the timer has not been exceeded, the time is 
incremented 538 and the process continues to measure 
and monitor the pressure differential. If the pressure dif- 
ferential in decision block 534 falls below the predeter- 
mined pressure threshold, then the process loops back to 
the start block 520. If the timer reaches the predeter- 
mined maximum time, the process generates a signal to 



the system 20 which indicates a potential faulty pressure 
sensor. 

[0103] An alternate embodiment for determining the health or 
functionality of the pressure sensors is shown in Figure 
18. In process 542, the controller 114 uses pressure val- 
ues from pressure sensors 270, 325 in the hydrogen gen- 
erators 36, 38 and the power generating modules 34 re- 
spectively. Process 542 starts at block 544, and proceeds 
to decision block 546 which determine if gas is flowing in 
the system, e.g. are the hydrogen generators producing 
gas, or are the fuel cells using gas. If the hydrogen gener- 
ators 36, 38 are producing gas, the process proceeds via 
line 549 to block 550 which measures the gas pressure at 
sensor 134 followed by the measurement the gas pres- 
sure at sensor 270 which is located in the hydrogen gen- 
erators 36, 38 (Figure 11). After the pressures are mea- 
sured, decision block 554 compares the absolute value of 
the pressure against a predetermined generation value. If 
the pressure differential is less than the predetermined 
generation value, the process 542 loops back to start 
block 544. If the pressure differential is greater that the 
predetermined generation value, then a potential fault has 
occurred either in the sensors 134, 270 or in the conduit 



54, so the process generates 556 a signal to the system 
20 which indicates a potential faulty pressure sensor. 

[0104] If decision block 546 determines that gas is flowing to the 
power generation modules 34, the process 542 proceeds 
via line 557 to block 558 which measures the gas pres- 
sure in conduit 58 and block 560 which measures the gas 
pressure inside the power generation module 34 at pres- 
sure transducer 325. After the pressures are measured, 
decision block 554 compares the absolute value of the 
pressure against a predetermined usage value. If the 
pressure differential is less than the predetermined usage 
value, the process 542 loops back to start block 544. If 
the pressure differential is greater that the predetermined 
usage value, then a potential fault has occurred either in 
the sensors 139, 325 or in the conduit 58, so the process 
generates 556 a signal to the system 20 which indicates a 
potential faulty pressure sensor. 

[0105] While the invention has been described with reference to a 
preferred embodiment, it will be understood by those 
skilled in the art that various changes may be made and 
equivalents many be substituted for elements thereof 
without departing from the scope of the invention. In ad- 
dition, may modifications may be made to adapt a partic- 



ular situation or material to the teacliings of the invention 
without departing from the essential scope thereof. 
Therefore, it is intended that the invention not be limited 
to the particular embodiment disclosed as the best mode 
contemplated for carrying out this invention. 
[0106] Unless the context requires otherwise, throughout the 

specification and claims which follow, the word "comprise" 
and variations thereof, such as, "comprises" and "compris- 
ing" are to be construed in an open, inclusive sense, that 
is as "including, but not limited to." 



